DMVPN Per Tunnel QOS Error "service-policy with queueing features..."
Am working on a DMVPN Design. Had followed all the guides and practices, but the hub is refusing to map the service-policy to the spoke.
priority percent #
bandwidth remaining percent #
bandwidth remaining percent # ! policy-map 8M-SHAPER class class-default shape average 7600000 service-policy OUTPUT ! ! int tunnel1 ip address x.x.x.x x.x.x.x ... nhrp map group 8M-SHAPER service-policy output 8M-SHAPER ... tunnel mode gre multipoint tunnel preotection ipsec profile DMVPN shared ...
I've omitted all the irrelevant stuff, basically the SA's are building, but i am getting the following error when the tunnels build:
%NHRP-3-QOS_POLICY_APPLY_FAILED: Failed to apply QoS policy 8M-SHAPER mapped to NHRP group 8M-SHAPER on interface tunnel1, to tunnel x.x.x.x due to policy installation failure.
service-policy with queueing features on SA sessions are not allowed
in conjunction with dmvpn based queueing policy.
any idea where the issue lies with this? its doing my head in.
This is to address those customers coming to ISE from ACS or new to ISE that need a password change portal (UCP)
What are the licensing requirements for this solution?
My Devices - For using the password change with My Devices you need plus licenses as ...
In this paper we will document the configuration and operation of an integrated solution that includes identity management, firewall, cloud-based management, and cloud-based logging.
We will use the following Cisco products:
These days everything is in the cloud. We all know that Cisco Firepower Threat Defense (FTD) is a unified software image, which includes the Cisco ASA features and FirePOWER Services. Using Cisco Defense Orchestrator (CDO), you can manage physical or virt...
Cisco Defense Orchestrator (CDO) is a cloud-based, multi-device manager that provides a simple, consistent, and highly secure way of managing security policies on all your ASA devices. CDO helps you optimize your ASA environment by identifying problems wi...